CCCHH/ansible-infra
CCCHH/ansible-infra
Watch
3
2
Fork
You've already forked ansible-infra
 1
Code Issues 19 Pull requests 17 Wiki Activity Actions
Ansible Playbooks and related configuration for CCCHH infrastructure https://infra-docs.hamburg.ccc.de/
954 commits 21 branches 1 tag 19 MiB
  • Python 56.1%
  • Jinja 35.5%
  • Shell 7.9%
  • HTML 0.3%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
June 1157c98ff5
 ansible-pull(role): make successful run timestamp exporter work 
The successful run timestamp exporter didn't work, because the
ansible-pull user wouldn't necessarily have the necessary permissions
and because the command wouldn't properly work.
Move the timestamp export as well as the reboot to separate services,
which always run as root, to ensure these operations work and to have a
clean setup using systemd services.
Also move the successful run timestamp exporter to a custom script to
have it work properly.
2026-11-04 17:28:03 +01:00
.forgejo/workflows Update all stable non-major dependencies 2026-07-08 00:16:11 +00:00
.vscode vscode settings: exclude vendored collections and roles from search 2026-02-09 19:53:27 +01:00
ansible_collections alloy(role): pull in alloy role that works from fux (#112) 2026-07-23 20:34:02 +02:00
collections alloy(role): pull in alloy role that works from fux (#112) 2026-07-23 20:34:02 +02:00
docs update matrix moderation guidelines based on infra-team discussion 2026-11-01 22:58:26 +01:00
inventories alloy(role): enable node exporter textfile collector 2026-11-03 19:58:03 +01:00
playbooks Add a role for Jitsi in Docker Compose 2026-10-08 10:23:17 +02:00
resources hta: Enable OIDC login 2026-11-03 00:23:15 +01:00
roles ansible-pull(role): make successful run timestamp exporter work 2026-11-04 17:28:03 +01:00
.ansible-lint ansible-lint: ignore more directories that aren't part of the repo 2026-10-29 15:50:53 +01:00
.editorconfig add .editorconfig to ensure some style and format consistency 2024-11-23 02:11:48 +01:00
.gitignore general: update gitignore 2026-08-07 22:55:55 +02:00
.sops.yaml Add Hackertours Admin (hta) (#182) 2026-11-02 18:51:09 +01:00
.yamllint.yaml ansible-lint: ignore more directories that aren't part of the repo 2026-10-29 15:50:53 +01:00
ansible.cfg mute ansible discovered interpreter warning 2026-05-06 11:44:41 +02:00
docs_requirements.txt docs: fix code blocks overflowing and add syntax highlighting 2026-05-19 18:33:03 +02:00
LICENSE Add LICENSE 2023-04-15 14:28:45 +00:00
mkdocs.yml Add documentation style outline (#97) 2026-05-27 20:49:07 +02:00
README.md README.md: correct sentence 2026-08-07 22:55:56 +02:00
renovate.json bypass pull request workflow for automatic patch updates 2026-09-22 22:10:44 +02:00
requirements.yml alloy(role): pull in alloy role that works from fux (#112) 2026-07-23 20:34:02 +02:00

README.md

CCCHH Ansible Repository

Folgende Geräte und Server werden duch dieses Ansible Repository verwaltet:

  • Diverse VMs im z9 (PVE Cluster)
  • Diverse VMs auf dem Chaosknoten

Host-spezifische Konfigurationsdateien liegen unter resources/ und werden für jeweils über eine host_vars-Datei im Inventory geladen.

Galaxy-Collections und -Rollen

Für einige Aspekte verwenden wir Collections und Rollen aus Ansible Galaxy. Diese werden in ansible_collections bzw. galaxy-roles hier im Repo vorgehalten.

Um unsere gevendorte Version zu aktualisieren, kann man folgendes machen:

ansible-galaxy install -r requirements.yml
ansible-galaxy role install -r requirements.yml

Playbook nur für einzelne Hosts ausführen

Ein paar der Hosts haben den selben Namen, was es etwas schwieriger macht, das Playbook nur für einen der Hosts auszuführen, z. B. public-reverse-proxy. Die Kombination aus --inventory und --limit führt zum Erfolg:

ansible-playbook playbooks/deploy.yaml --inventory inventories/chaosknoten/hosts.yaml --limit public-reverse-proxy

License

This CCCHH ansible-ccchh repository is licensed under the MIT License.
custom_pipeline_oidc_group_and_role_mapping.py is licensed under the Creative Commons: CC BY-SA 4.0 license.